Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/562D65FACDCB11EFB5E53442762E951A.roa
File: 562D65FACDCB11EFB5E53442762E951A.roa (raw, json)
Hash identifier: 3W4qg2ercXFswyUvqnPM8HgyJijWU0K+l6hLRtP0wPA=
Subject key identifier: AA:AD:0E:AE:0C:11:D2:E8:98:D8:F4:5B:81:10:39:DE:2F:8C:02:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0101DC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/562D65FACDCB11EFB5E53442762E951A.roa
Signing time: Wed 08 Jan 2025 14:17:48 +0000
ROA not before: Wed 08 Jan 2025 14:17:44 +0000
ROA not after: Tue 16 Dec 2025 14:17:44 +0000
asID: 984
IP address blocks: 156.249.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66012 (0x101dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 14:17:44 2025 GMT
Not After : Dec 16 14:17:44 2025 GMT
Subject: CN=677e890c-68f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:89:9d:48:16:67:70:48:03:d6:e8:bf:03:bb:
f9:09:76:a0:dc:49:70:0a:12:6e:37:84:be:a6:ce:
16:79:0b:1a:2b:95:df:f4:79:f1:d5:1c:b8:20:95:
c8:64:39:74:82:46:fe:fc:d6:a8:ed:0d:44:f1:dc:
0f:9f:98:08:80:c9:99:a0:13:21:77:07:2c:8f:89:
02:d5:27:0e:66:4f:3d:43:7b:37:6f:5a:fb:3c:56:
9d:45:33:50:70:e2:77:de:db:98:0e:17:da:f3:2e:
1e:dc:97:f1:b8:53:8a:db:59:32:44:2c:b4:2c:d0:
eb:5a:68:8d:26:dc:ee:e8:91:45:00:11:80:31:3d:
b9:66:32:3c:7b:bb:7a:a9:20:6f:db:7c:f3:d7:85:
cd:3b:43:e7:6c:0c:e8:a2:80:df:2e:47:52:af:55:
87:f8:4c:6f:7a:6c:ac:3e:40:ab:89:5b:3c:3d:76:
5c:94:60:f0:e8:87:39:fd:1f:ef:e6:98:ee:5c:6c:
78:f1:0d:ca:71:72:91:cb:74:03:2f:d6:1c:31:93:
70:8b:d0:8b:50:7f:b3:eb:51:f9:b9:3b:80:f5:bc:
20:57:ce:31:0e:3e:90:2d:34:69:6a:5f:8b:03:a3:
65:96:c1:f3:2e:32:5b:94:58:f1:a8:eb:4a:ea:9a:
30:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AD:0E:AE:0C:11:D2:E8:98:D8:F4:5B:81:10:39:DE:2F:8C:02:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/562D65FACDCB11EFB5E53442762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.71.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:51:2f:ed:0d:40:b0:7a:ef:8e:3d:8a:d5:56:82:c5:af:22:
f3:76:45:74:45:e9:a4:04:69:70:a8:24:a1:ea:e6:99:6d:8f:
a9:3b:03:94:23:14:51:4d:ee:7f:a1:4b:e5:ef:81:1e:fb:2a:
5e:b5:c0:10:f9:b4:ba:bf:ce:e6:5b:b0:d7:15:cf:a5:0e:86:
57:10:0b:86:bf:84:57:29:28:ab:27:30:c1:c0:b7:7f:a8:36:
f5:c0:d8:39:3a:08:f8:82:c5:0c:66:c1:7b:7b:31:bc:00:01:
7f:b4:a2:60:1b:a6:dd:f9:9e:42:25:c6:b7:b6:ef:3d:e7:5b:
bc:39:73:3f:6b:49:9f:af:0a:ce:98:4e:a5:80:68:a0:29:2d:
95:c9:f5:96:b8:49:00:b5:c2:ac:64:81:fd:c5:25:d7:6e:99:
c4:1d:26:1b:19:24:2e:c3:bf:3a:a2:40:e7:b2:b5:fd:d0:8c:
1e:f9:12:bc:71:91:03:1a:2d:93:ee:b3:d7:f7:ac:d5:c5:81:
7a:06:9b:88:ab:b4:02:88:c1:8e:9e:00:0d:9d:b6:e9:dd:36:
56:c5:ca:40:67:df:14:07:f9:43:76:93:6c:bb:57:20:28:f2:
ef:a0:db:07:84:e6:c6:7a:2e:dc:bb:9f:23:fb:35:c8:03:ba:
de:5a:44:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:33 2025 by rpki-client